Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
File:                     amXibTSlO_J-8hE5NjBzuia52_o.mft (raw, json)
Hash identifier:          0WMvVJiaEpepx8EK7nGpdNT3EdTX/x+XYaZgHq3vFdk=
Subject key identifier:   05:DB:CC:E7:A9:4A:5A:CE:B1:E9:19:7A:C9:6C:E5:EB:1B:DA:39:54
Authority key identifier: 6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
Certificate issuer:       /CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
Manifest number:          057F
Signing time:             Wed 02 Jul 2025 23:36:07 +0000
Manifest this update:     Wed 02 Jul 2025 23:36:06 +0000
Manifest next update:     Wed 09 Jul 2025 23:36:06 +0000
Files and hashes:         1: amXibTSlO_J-8hE5NjBzuia52_o.crl (hash: 4TybFuuAZR5vz9yT2z96RL3pHQQ4lGIREWMOI0ndYkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
                          rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B46A, serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
        Validity
            Not Before: Jul  2 23:36:06 2025 GMT
            Not After : Jul  9 23:36:06 2025 GMT
        Subject: CN=6865c266-7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:8a:dd:7d:4c:45:f1:4d:91:d6:1d:04:2d:
                    10:1c:e8:44:ef:87:18:5d:bf:73:80:18:23:24:d6:
                    b9:70:43:89:7d:2c:96:53:3e:f5:31:da:aa:a8:3e:
                    61:95:bd:9a:f1:c0:d5:54:66:85:52:ca:e0:86:25:
                    23:df:6b:32:19:73:1f:aa:65:e0:8e:f3:c3:03:d8:
                    68:32:33:b6:ff:38:9d:cd:2d:df:c7:13:84:4f:aa:
                    c9:85:d9:0e:fe:2b:59:c4:b6:7f:34:98:47:fd:f7:
                    25:b0:90:79:2c:5c:4f:c6:65:47:0c:1c:91:57:57:
                    2f:b6:22:03:1a:06:83:de:56:59:54:3f:74:c4:03:
                    e5:44:cd:ca:15:61:ce:ed:4e:c9:29:e2:13:c8:79:
                    3c:a4:0d:5e:fc:f3:84:25:00:01:1e:77:37:3b:d0:
                    3a:67:12:90:a2:8c:47:27:a7:16:d0:e0:86:b3:8b:
                    b2:31:5d:45:30:e3:72:5e:31:93:f7:c5:7c:ac:74:
                    fc:d6:1a:4b:6d:b2:d1:be:b7:79:fe:7a:e6:3a:cb:
                    59:d3:78:c1:d4:c9:c4:91:25:4e:8e:54:8a:cc:f4:
                    8f:65:8a:81:47:87:49:e0:38:2d:b1:af:29:d7:0a:
                    db:16:78:bb:77:2d:07:73:ea:b6:6f:a4:b0:88:95:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:CC:E7:A9:4A:5A:CE:B1:E9:19:7A:C9:6C:E5:EB:1B:DA:39:54
            X509v3 Authority Key Identifier:
                keyid:6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:cd:ba:48:73:06:bf:16:66:fb:4e:4e:0b:05:bf:6b:25:
         b6:59:1d:f2:b8:24:09:2f:87:b8:79:d7:ee:5b:48:f0:37:be:
         cd:96:68:c2:a2:80:d5:d2:b5:5f:b6:f6:c4:08:e0:59:6a:05:
         c5:e2:0f:b6:5a:85:59:70:18:f8:5f:ef:c8:be:cc:af:e7:39:
         a2:06:fc:22:6b:6f:df:e2:5d:7b:15:9b:1a:77:90:10:1c:6b:
         55:5a:bf:12:05:9d:4b:ed:85:48:bc:37:5c:b2:80:35:d9:18:
         18:92:fe:14:fa:91:54:88:6e:7d:00:ad:75:69:19:d9:98:dd:
         85:75:ee:f5:ea:9d:cb:1d:8b:97:46:7a:16:41:99:42:77:f8:
         a0:b0:d3:39:85:0f:2d:f8:51:3b:1e:d7:de:24:cb:80:6e:fe:
         1a:ae:30:d1:be:70:10:06:78:fe:7d:d1:e7:b5:eb:74:3b:7c:
         9d:6c:44:2e:e4:6c:86:7b:b8:ef:7b:64:83:b4:7f:11:10:67:
         3c:1e:3a:91:6b:a6:2d:20:f7:cd:4b:cf:e3:5d:a6:d0:9a:e0:
         6e:df:a2:d9:a3:76:cf:17:57:49:db:7a:1b:67:4b:d2:e0:c9:
         53:6e:01:5d:ca:fd:b5:6a:44:37:78:3e:9a:a6:13:dc:8c:a7:
         e1:52:b1:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI0NkExMTAvBgNVBAUTKDZBNjVFMjZEMzRBNTNCRjI3RUYyMTEzOTM2MzA3M0JB
MjZCOURCRkEwHhcNMjUwNzAyMjMzNjA2WhcNMjUwNzA5MjMzNjA2WjAYMRYwFAYD
VQQDEw02ODY1YzI2Ni03MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0qK3X1MRfFNkdYdBC0QHOhE74cYXb9zgBgjJNa5cEOJfSyWUz71MdqqqD5h
lb2a8cDVVGaFUsrghiUj32syGXMfqmXgjvPDA9hoMjO2/zidzS3fxxOET6rJhdkO
/itZxLZ/NJhH/fclsJB5LFxPxmVHDByRV1cvtiIDGgaD3lZZVD90xAPlRM3KFWHO
7U7JKeITyHk8pA1e/POEJQABHnc3O9A6ZxKQooxHJ6cW0OCGs4uyMV1FMONyXjGT
98V8rHT81hpLbbLRvrd5/nrmOstZ03jB1MnEkSVOjlSKzPSPZYqBR4dJ4Dgtsa8p
1wrbFni7dy0Hc+q2b6SwiJUERwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXbzOep
SlrOsekZesls5esb2jlUMB8GA1UdIwQYMBaAFGpl4m00pTvyfvIROTYwc7omudv6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS9GN0FBNTA5Q0Uw
OTgxMUVCOTI3NjBCNERDNEY5QUUwMi9hbVhpYlRTbE9fSi04aEU1TmpCenVpYTUy
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2FtWGliVFNsT19KLThoRTVOakJ6dWlhNTJfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ2QS9GN0FBNTA5Q0UwOTgxMUVCOTI3NjBCNERDNEY5QUUwMi9hbVhpYlRTbE9f
Si04aEU1TmpCenVpYTUyX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByHs26SHMGvxZm+05OCwW/ayW2WR3yuCQJL4e4edfuW0jwN77NlmjC
ooDV0rVftvbECOBZagXF4g+2WoVZcBj4X+/Ivsyv5zmiBvwia2/f4l17FZsad5AQ
HGtVWr8SBZ1L7YVIvDdcsoA12RgYkv4U+pFUiG59AK11aRnZmN2Fde716p3LHYuX
RnoWQZlCd/igsNM5hQ8t+FE7HtfeJMuAbv4arjDRvnAQBnj+fdHntet0O3ydbEQu
5GyGe7jve2SDtH8REGc8HjqRa6YtIPfNS8/jXabQmuBu36LZo3bPF1dJ23obZ0vS
4MlTbgFdyv21akQ3eD6aphPcjKfhUrFW
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:01:36 2025 by rpki-client